ComboFix 13-10-08.01 - Thomas 09.10.2013  17:28:43.1.4 - x64
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.47.1033.18.16346.14228 [GMT 2:00]
Kjører fra: c:\users\Thomas\Desktop\ComboFix.exe
AV: AVG AntiVirus Free Edition 2013 *Disabled/Updated* {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9}
SP: AVG AntiVirus Free Edition 2013 *Disabled/Updated* {B5F5C120-2089-702E-0001-553BB0D5A664}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 * Opprettet nytt gjenopprettingspunkt
.
.
(((((((((((((((((((((((((((((((((((((((   Andre slettinger   )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\ntuser.dat
c:\windows\IsUn0414.exe
c:\windows\SysWow64\tmpBD3.tmp
c:\windows\SysWow64\tmpD5A.tmp
G:\install.exe
.
.
(((((((((((((((((((((((((((   Filer Opprettet Fra 2013-09-09 til 2013-10-09  )))))))))))))))))))))))))))))))))
.
.
2013-10-09 15:30 . 2013-10-09 15:30	--------	d-----w-	c:\users\hedev\AppData\Local\temp
2013-10-09 15:30 . 2013-10-09 15:30	--------	d-----w-	c:\users\Default\AppData\Local\temp
2013-10-08 10:47 . 2013-10-08 18:28	--------	d-----w-	c:\users\Thomas\AppData\Local\NFS Underground 2
2013-10-07 14:32 . 2013-10-07 14:32	--------	d-----w-	c:\users\Thomas\AppData\Local\DOSBox
2013-10-04 21:34 . 2013-10-04 21:52	--------	d-----w-	c:\programdata\TuneUp Software
2013-10-04 21:34 . 2013-10-04 21:38	--------	d-sh--w-	c:\programdata\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}
2013-10-04 20:41 . 2013-10-04 20:41	--------	d-----w-	c:\program files (x86)\MSI Kombustor 2.5
2013-10-03 10:39 . 2013-10-03 10:39	--------	d-----w-	c:\programdata\ATI
2013-10-03 10:39 . 2013-10-03 10:39	--------	d-----w-	c:\program files (x86)\AMD AVT
2013-10-03 10:36 . 2013-10-03 10:38	--------	d-----w-	c:\programdata\Package Cache
2013-09-12 14:04 . 2013-08-05 02:25	155584	----a-w-	c:\windows\system32\drivers\ataport.sys
.
.
.
((((((((((((((((((((((((((((((((((((((((   Find3M Rapport   ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-10-09 12:28 . 2012-10-06 13:12	71048	----a-w-	c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-10-09 12:28 . 2012-10-06 13:12	692616	----a-w-	c:\windows\SysWow64\FlashPlayerApp.exe
2013-10-09 12:17 . 2012-10-03 19:05	30528	----a-w-	c:\windows\GVTDrv64.sys
2013-10-09 12:17 . 2012-10-03 19:04	25640	----a-w-	c:\windows\gdrv.sys
2013-10-02 16:59 . 2012-10-04 13:45	46368	----a-w-	c:\windows\system32\drivers\avgtpx64.sys
2013-09-12 21:07 . 2012-10-14 19:43	79143768	----a-w-	c:\windows\system32\MRT.exe
2013-09-04 23:43 . 2013-09-04 23:43	45880	----a-w-	c:\windows\system32\drivers\avgrkx64.sys
2013-08-31 00:14 . 2013-08-31 00:14	156712	----a-w-	c:\windows\system32\amdhcp64.dll
2013-08-31 00:14 . 2013-08-31 00:14	141256	----a-w-	c:\windows\SysWow64\amdhcp32.dll
2013-08-31 00:14 . 2013-08-31 00:14	78432	----a-w-	c:\windows\system32\atimpc64.dll
2013-08-31 00:14 . 2013-08-31 00:14	78432	----a-w-	c:\windows\system32\amdpcom64.dll
2013-08-31 00:14 . 2013-08-31 00:14	71704	----a-w-	c:\windows\SysWow64\atimpc32.dll
2013-08-31 00:14 . 2013-08-31 00:14	71704	----a-w-	c:\windows\SysWow64\amdpcom32.dll
2013-08-31 00:14 . 2013-08-31 00:14	125824	----a-w-	c:\windows\SysWow64\atiuxpag.dll
2013-08-31 00:14 . 2012-02-15 02:12	142792	----a-w-	c:\windows\system32\atiuxp64.dll
2013-08-31 00:13 . 2012-12-19 19:30	97984	----a-w-	c:\windows\SysWow64\atiu9pag.dll
2013-08-31 00:13 . 2012-02-15 02:12	114488	----a-w-	c:\windows\system32\atiu9p64.dll
2013-08-31 00:13 . 2012-02-15 03:17	1233080	----a-w-	c:\windows\system32\aticfx64.dll
2013-08-31 00:13 . 2013-08-31 00:13	1027544	----a-w-	c:\windows\SysWow64\aticfx32.dll
2013-08-31 00:13 . 2012-02-15 02:52	9464840	----a-w-	c:\windows\system32\atidxx64.dll
2013-08-31 00:13 . 2013-08-31 00:13	8215992	----a-w-	c:\windows\SysWow64\atidxx32.dll
2013-08-31 00:13 . 2012-12-19 19:44	6176008	----a-w-	c:\windows\SysWow64\atiumdva.dll
2013-08-31 00:13 . 2013-08-31 00:13	6189416	----a-w-	c:\windows\SysWow64\atiumdag.dll
2013-08-31 00:13 . 2012-07-28 01:41	6767240	----a-w-	c:\windows\system32\atiumd6a.dll
2013-08-31 00:13 . 2012-07-28 01:25	7256496	----a-w-	c:\windows\system32\atiumd64.dll
2013-08-31 00:11 . 2013-08-31 00:11	12528640	----a-w-	c:\windows\system32\drivers\atikmdag.sys
2013-08-30 23:48 . 2013-08-30 23:48	127488	----a-w-	c:\windows\system32\coinst_13.152.dll
2013-08-30 23:48 . 2013-08-30 23:48	229376	----a-w-	c:\windows\system32\clinfo.exe
2013-08-30 23:47 . 2013-08-30 23:47	98816	----a-w-	c:\windows\system32\OpenVideo64.dll
2013-08-30 23:47 . 2013-08-30 23:47	83456	----a-w-	c:\windows\SysWow64\OpenVideo.dll
2013-08-30 23:47 . 2013-08-30 23:47	86528	----a-w-	c:\windows\system32\OVDecode64.dll
2013-08-30 23:47 . 2013-08-30 23:47	73216	----a-w-	c:\windows\SysWow64\OVDecode.dll
2013-08-30 23:47 . 2013-08-30 23:47	28192256	----a-w-	c:\windows\system32\amdocl64.dll
2013-08-30 23:45 . 2012-12-19 14:38	23760896	----a-w-	c:\windows\SysWow64\amdocl.dll
2013-08-30 23:43 . 2013-08-30 23:43	63488	----a-w-	c:\windows\system32\OpenCL.dll
2013-08-30 23:43 . 2012-12-19 14:34	57344	----a-w-	c:\windows\SysWow64\OpenCL.dll
2013-08-30 23:35 . 2013-08-30 23:35	25387520	----a-w-	c:\windows\system32\atio6axx.dll
2013-08-30 23:18 . 2013-08-30 23:18	368640	----a-w-	c:\windows\system32\atiapfxx.exe
2013-08-30 23:18 . 2013-08-30 23:18	62464	----a-w-	c:\windows\system32\aticalrt64.dll
2013-08-30 23:18 . 2013-08-30 23:18	52224	----a-w-	c:\windows\SysWow64\aticalrt.dll
2013-08-30 23:18 . 2013-08-30 23:18	55808	----a-w-	c:\windows\system32\aticalcl64.dll
2013-08-30 23:18 . 2013-08-30 23:18	49152	----a-w-	c:\windows\SysWow64\aticalcl.dll
2013-08-30 23:17 . 2013-08-30 23:17	15716352	----a-w-	c:\windows\system32\aticaldd64.dll
2013-08-30 23:14 . 2013-08-30 23:14	14302208	----a-w-	c:\windows\SysWow64\aticaldd.dll
2013-08-30 23:13 . 2013-08-30 23:13	21400064	----a-w-	c:\windows\SysWow64\atioglxx.dll
2013-08-30 22:59 . 2013-08-30 22:59	442368	----a-w-	c:\windows\system32\atidemgy.dll
2013-08-30 22:58 . 2013-08-30 22:58	26112	----a-w-	c:\windows\system32\atimuixx.dll
2013-08-30 22:58 . 2013-08-30 22:58	571904	----a-w-	c:\windows\system32\atieclxx.exe
2013-08-30 22:57 . 2013-08-30 22:57	239616	----a-w-	c:\windows\system32\atiesrxx.exe
2013-08-30 22:56 . 2013-08-30 22:56	190976	----a-w-	c:\windows\system32\atitmm64.dll
2013-08-30 22:37 . 2013-08-30 22:37	96256	----a-w-	c:\windows\system32\amdave64.dll
2013-08-30 22:37 . 2013-08-30 22:37	90624	----a-w-	c:\windows\SysWow64\amdave32.dll
2013-08-30 22:37 . 2013-08-30 22:37	89088	----a-w-	c:\windows\system32\atisamu64.dll
2013-08-30 22:37 . 2013-08-30 22:37	80896	----a-w-	c:\windows\SysWow64\atisamu32.dll
2013-08-30 22:33 . 2013-08-30 22:33	784384	----a-w-	c:\windows\system32\atiadlxx.dll
2013-08-30 22:33 . 2012-02-15 02:13	594944	----a-w-	c:\windows\SysWow64\atiadlxy.dll
2013-08-30 22:33 . 2013-08-30 22:33	43520	----a-w-	c:\windows\system32\drivers\ati2erec.dll
2013-08-30 22:32 . 2013-08-30 22:32	75264	----a-w-	c:\windows\system32\atig6pxx.dll
2013-08-30 22:32 . 2013-08-30 22:32	69632	----a-w-	c:\windows\SysWow64\atiglpxx.dll
2013-08-30 22:32 . 2013-08-30 22:32	69632	----a-w-	c:\windows\system32\atiglpxx.dll
2013-08-30 22:32 . 2013-08-30 22:32	100352	----a-w-	c:\windows\system32\atig6txx.dll
2013-08-30 22:32 . 2012-12-19 19:33	96768	----a-w-	c:\windows\SysWow64\atigktxx.dll
2013-08-30 22:32 . 2013-08-30 22:32	618496	----a-w-	c:\windows\system32\drivers\atikmpag.sys
2013-08-30 17:58 . 2013-08-30 17:58	51200	----a-w-	c:\windows\system32\kdbsdk64.dll
2013-08-30 17:53 . 2013-08-30 17:53	38912	----a-w-	c:\windows\SysWow64\kdbsdk32.dll
2013-08-02 01:48 . 2013-09-12 14:04	44032	----a-w-	c:\windows\apppatch\acwow64.dll
2013-07-25 09:25 . 2013-08-14 14:38	1888768	----a-w-	c:\windows\system32\WMVDECOD.DLL
2013-07-25 08:57 . 2013-08-14 14:38	1620992	----a-w-	c:\windows\SysWow64\WMVDECOD.DLL
2013-07-19 23:51 . 2013-07-19 23:51	311608	----a-w-	c:\windows\system32\drivers\avgloga.sys
2013-07-19 23:50 . 2013-07-19 23:50	71480	----a-w-	c:\windows\system32\drivers\avgidsha.sys
2013-07-19 23:50 . 2013-07-19 23:50	246072	----a-w-	c:\windows\system32\drivers\avgidsdrivera.sys
2013-07-19 23:50 . 2013-07-19 23:50	206648	----a-w-	c:\windows\system32\drivers\avgldx64.sys
2013-07-19 01:58 . 2013-08-14 14:39	2048	----a-w-	c:\windows\system32\tzres.dll
2013-07-19 01:41 . 2013-08-14 14:39	2048	----a-w-	c:\windows\SysWow64\tzres.dll
.
.
((((((((((((((((((((((((((((((((   Oppstartspunkter I Registeret   )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Merk* tomme oppføringer & gyldige standardoppføringer vises ikke  
REGEDIT4
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{0F3DC9E0-C459-4a40-BCF8-747BD9322E10}"= "c:\program files (x86)\Splashtop\Splashtop Connect IE\AddressBarSearch.dll" [2011-08-29 165776]
.
[HKEY_CLASSES_ROOT\clsid\{0f3dc9e0-c459-4a40-bcf8-747bd9322e10}]
[HKEY_CLASSES_ROOT\AddressBarSearch.SearchHook.1]
[HKEY_CLASSES_ROOT\TypeLib\{4E8E0178-00EF-413d-9324-E7B3E31572E3}]
[HKEY_CLASSES_ROOT\AddressBarSearch.SearchHook]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{336D0C35-8A85-403a-B9D2-65C292C39087}]
2013-01-29 13:29	170840	----a-w-	c:\program files\IB Updater\Extension32.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}]
2013-10-02 16:59	3353624	----a-w-	c:\program files (x86)\AVG Secure Search\17.0.1.12\AVG Secure Search_toolbar.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]
"{95B7759C-8C7F-4BF1-B163-73684A933233}"= "c:\program files (x86)\AVG Secure Search\17.0.1.12\AVG Secure Search_toolbar.dll" [2013-10-02 3353624]
.
[HKEY_CLASSES_ROOT\clsid\{95b7759c-8c7f-4bf1-b163-73684a933233}]
[HKEY_CLASSES_ROOT\AVG Secure Search.PugiObj.1]
[HKEY_CLASSES_ROOT\AVG Secure Search.PugiObj]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-21 1475584]
"DAEMON Tools Lite"="g:\daemon tools lite\DTLite.exe" [2012-08-28 3671904]
"Steam"="g:\steam\Steam.exe" [2013-10-05 1813928]
"ANT Agent"="c:\program files (x86)\Garmin\ANT Agent\ANT Agent.exe" [2013-02-15 14731776]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"ZyngaGamesAgent"="c:\program files (x86)\Splashtop\Splashtop Connect\ZyngaGamesAgent.exe" [2010-11-15 841544]
"STCAgent"="c:\program files (x86)\Splashtop\Splashtop Connect IE\STCAgent.exe" [2011-08-29 771968]
"THX Audio Control Panel"="c:\program files (x86)\Creative\Sound Blaster X-Fi MB 2\THXAudioCP\THXAudio.exe" [2011-08-29 1517056]
"VolPanel"="c:\program files (x86)\Creative\Sound Blaster X-Fi MB 2\Sound Blaster Panel\VolPanlu.exe" [2010-02-18 241789]
"IAStorIcon"="c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" [2011-11-29 284440]
"USB3MON"="c:\program files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe" [2012-01-27 291608]
"AVG_UI"="c:\program files (x86)\AVG\AVG2013\avgui.exe" [2013-08-15 4411440]
"vProt"="c:\program files (x86)\AVG Secure Search\vprot.exe" [2013-10-02 2404376]
"PWRISOVM.EXE"="g:\poweriso\PWRISOVM.EXE" [2012-08-24 336992]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe" [2013-08-30 766208]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce]
"EasyTuneVI"="c:\program files (x86)\GIGABYTE\ET6\ETCall.exe" [2012-02-01 40960]
.
c:\users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OpenOffice.org 3.4.1.lnk - c:\program files (x86)\OpenOffice.org 3\program\quickstart.exe [2013-1-18 1199104]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"aux5"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-]
"UpdReg"=c:\windows\UpdReg.EXE
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe"
.
R2 AVGIDSAgent;AVGIDSAgent;c:\program files (x86)\AVG\AVG2013\avgidsagent.exe;c:\program files (x86)\AVG\AVG2013\avgidsagent.exe [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R3 AppleChargerSrv;AppleChargerSrv;c:\windows\system32\AppleChargerSrv.exe;c:\windows\SYSNATIVE\AppleChargerSrv.exe [x]
R3 Creative ALchemy AL6 Licensing Service;Creative ALchemy AL6 Licensing Service;c:\program files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe;c:\program files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [x]
R3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service;c:\program files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe;c:\program files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [x]
R3 dump_wmimmc;dump_wmimmc;g:\steam\steamapps\common\GV Online Eg\GameGuard\dump_wmimmc.sys;g:\steam\steamapps\common\GV Online Eg\GameGuard\dump_wmimmc.sys [x]
R3 etdrv;etdrv;c:\windows\etdrv.sys;c:\windows\etdrv.sys [x]
R3 GVTDrv64;GVTDrv64;c:\windows\GVTDrv64.sys;c:\windows\GVTDrv64.sys [x]
R3 MSICDSetup;MSICDSetup;e:\cdriver64.sys;e:\CDriver64.sys [x]
R3 npggsvc;nProtect GameGuard Service;c:\windows\system32\GameMon.des;c:\windows\SYSNATIVE\GameMon.des [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R3 WinRing0_1_2_0;WinRing0_1_2_0;c:\users\Thomas\AppData\Local\Temp\Rar$EXa0.472\WinRing0x64.sys;c:\users\Thomas\AppData\Local\Temp\Rar$EXa0.472\WinRing0x64.sys [x]
S0 AVGIDSHA;AVGIDSHA;c:\windows\system32\DRIVERS\avgidsha.sys;c:\windows\SYSNATIVE\DRIVERS\avgidsha.sys [x]
S0 Avgloga;AVG Logging Driver;c:\windows\system32\DRIVERS\avgloga.sys;c:\windows\SYSNATIVE\DRIVERS\avgloga.sys [x]
S0 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield;c:\windows\system32\DRIVERS\avgmfx64.sys;c:\windows\SYSNATIVE\DRIVERS\avgmfx64.sys [x]
S0 Avgrkx64;AVG Anti-Rootkit Driver;c:\windows\system32\DRIVERS\avgrkx64.sys;c:\windows\SYSNATIVE\DRIVERS\avgrkx64.sys [x]
S0 iusb3hcs;Intel(R) USB 3.0 Host Controller Switch Driver;c:\windows\system32\DRIVERS\iusb3hcs.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3hcs.sys [x]
S0 sptd;sptd;c:\windows\\SystemRoot\System32\Drivers\sptd.sys;c:\windows\\SystemRoot\System32\Drivers\sptd.sys [x]
S1 AppleCharger;AppleCharger;c:\windows\system32\DRIVERS\AppleCharger.sys;c:\windows\SYSNATIVE\DRIVERS\AppleCharger.sys [x]
S1 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\DRIVERS\avgidsdrivera.sys;c:\windows\SYSNATIVE\DRIVERS\avgidsdrivera.sys [x]
S1 Avgldx64;AVG AVI Loader Driver;c:\windows\system32\DRIVERS\avgldx64.sys;c:\windows\SYSNATIVE\DRIVERS\avgldx64.sys [x]
S1 Avgtdia;AVG TDI Driver;c:\windows\system32\DRIVERS\avgtdia.sys;c:\windows\SYSNATIVE\DRIVERS\avgtdia.sys [x]
S1 avgtp;avgtp;c:\windows\system32\drivers\avgtpx64.sys;c:\windows\SYSNATIVE\drivers\avgtpx64.sys [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys;c:\windows\SYSNATIVE\DRIVERS\dtsoftbus01.sys [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 avgwd;AVG WatchDog;c:\program files (x86)\AVG\AVG2013\avgwdsvc.exe;c:\program files (x86)\AVG\AVG2013\avgwdsvc.exe [x]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [x]
S2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface;c:\program files\Intel\iCLS Client\HeciServer.exe;c:\program files\Intel\iCLS Client\HeciServer.exe [x]
S2 Intel(R) PROSet Monitoring Service;Intel(R) PROSet Monitoring Service;c:\windows\system32\IProsetMonitor.exe;c:\windows\SYSNATIVE\IProsetMonitor.exe [x]
S2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [x]
S2 SCBackService;Splashtop Connect Service;c:\program files (x86)\Splashtop\Splashtop Connect\BackService.exe;c:\program files (x86)\Splashtop\Splashtop Connect\BackService.exe [x]
S2 SSUService;Splashtop Software Updater Service;c:\program files (x86)\Splashtop\Splashtop Software Updater\SSUService.exe;c:\program files (x86)\Splashtop\Splashtop Software Updater\SSUService.exe [x]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
S2 vToolbarUpdater17.0.12;vToolbarUpdater17.0.12;c:\program files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\17.0.12\ToolbarUpdater.exe;c:\program files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\17.0.12\ToolbarUpdater.exe [x]
S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys;c:\windows\SYSNATIVE\drivers\AtihdW76.sys [x]
S3 ICCS;Intel(R) Integrated Clock Controller Service - Intel(R) ICCS;c:\program files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe;c:\program files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [x]
S3 iusb3hub;Intel(R) USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\iusb3hub.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3hub.sys [x]
S3 iusb3xhc;Intel(R) USB 3.0 eXtensible Host Controller Driver;c:\windows\system32\DRIVERS\iusb3xhc.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3xhc.sys [x]
S3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x64.sys;c:\windows\SYSNATIVE\DRIVERS\L1C62x64.sys [x]
S3 MBfilt;MBfilt;c:\windows\system32\drivers\MBfilt64.sys;c:\windows\SYSNATIVE\drivers\MBfilt64.sys [x]
S3 WDC_SAM;WD SCSI Pass Thru driver;c:\windows\system32\DRIVERS\wdcsam64.sys;c:\windows\SYSNATIVE\DRIVERS\wdcsam64.sys [x]
.
.
--- Andre tjenester/drivere lastet i minnet ---
.
*Deregistered* - RTCore64
.
Innholdet i mappen 'Scheduled Tasks' (planlagte oppgaver)
.
2013-10-09 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-10-06 12:28]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2012-01-16 12445288]
"THXCfg64"="c:\windows\system32\THXCfg64.dll" [2010-09-14 25600]
"RunDLLEntry"="c:\windows\system32\AmbRunE.dll" [2009-02-26 17920]
"IntelliType Pro"="c:\program files\Microsoft Device Center\itype.exe" [2012-06-26 1464928]
"IntelliPoint"="c:\program files\Microsoft Device Center\ipoint.exe" [2012-06-26 2004584]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2012-10-10 171040]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2012-10-10 399392]
"Persistence"="c:\windows\system32\igfxpers.exe" [2012-10-10 441888]
"Start WingMan Profiler"="c:\program files\Logitech\Gaming Software\LWEMon.exe" [2010-06-14 190536]
.
------- Tilleggsskanning -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://mystart.incredibar.com/mb185?a=6R8OKfi2mL&i=26
mLocal Page = c:\windows\SysWOW64\blank.htm
TCP: DhcpNameServer = 10.0.0.138
Handler: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - c:\program files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\17.0.12\ViProtocol.dll
.
- - - - TOMME PEKERE FJERNET - - - -
.
Wow6432Node-HKCU-Run-c:\users\Thomas\AppData\Roaming\Paradox Interactive\Paradox Interactive.exe - c:\users\Thomas\AppData\Roaming\Paradox Interactive\Paradox Interactive.exe
Wow6432Node-HKCU-Run-c:\users\Thomas\AppData\Roaming\Paradox Interactive\devupgrade.exe - c:\users\Thomas\AppData\Roaming\Paradox Interactive\devupgrade.exe
c:\users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Paradox Interactive.lnk - c:\users\Thomas\AppData\Roaming\Paradox Interactive\Paradox Interactive.exe
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
AddRemove-PunkBusterSvc - c:\windows\system32\pbsvc.exe
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\npggsvc]
"ImagePath"="c:\windows\system32\GameMon.des -service"
.
--------------------- LÅSTE REGISTERNØKLER ---------------------
.
[HKEY_USERS\S-1-5-21-2282134204-285339596-3668403330-1000\Software\SecuROM\License information*]
"datasecu"=hex:a5,f2,97,a7,43,27,fb,c1,1b,20,2c,d7,6a,eb,d5,63,b1,6f,bb,46,0f,
   9c,3c,b9,5c,45,11,99,8d,90,ff,98,0b,f1,16,9e,31,9e,b3,c3,5b,92,c7,23,c3,3a,\
"rkeysecu"=hex:e8,30,53,e4,70,81,dd,0c,e6,95,87,a7,91,60,fc,00
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Program Files (x86)\\GIGABYTE\\ET6\\Flash11e.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Program Files (x86)\\GIGABYTE\\ET6\\Flash11e.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Program Files (x86)\\GIGABYTE\\ET6\\Flash11e.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Program Files (x86)\\GIGABYTE\\ET6\\Flash11e.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*1*]
@="?????????????????? v1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*1*\CLSID]
@="{E23FE9C6-778E-49D4-B537-38FCDE4887D8}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*2*]
@="?????????????????? v2"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*2*\CLSID]
@="{9BE31822-FDAD-461B-AD51-BE1D1C159921}"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Tidspunkt ferdig: 2013-10-09  17:31:51
ComboFix-quarantined-files.txt  2013-10-09 15:31
.
Pre-Run: 38 402 015 232 bytes free
Post-Run: 38 146 732 032 bytes free
.
- - End Of File - - 713766FD615ADE665385F05388CA2095